1dddeca3d3692dcea9bea130c1fdc210_NeikiAnalytics[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dddeca3d3692dcea9bea130c1fdc210_NeikiAnalytics.exe
Size

1.8MB
MD5

1dddeca3d3692dcea9bea130c1fdc210
SHA1

cd3c84531d7bddf933a8ad57e1bd8f1fe86ca45b
SHA256

162aa96ff3787b95bb21647b3dcce21990f552b89274c0a6b17afe6b89b50561
SHA512

5691f334f37cf6b0cd2c9c099efa8b8502f1827bd5f6a71429ce425643c5d56a78cbdc320df03b3a22d7c6e3197ff0ac168c9e293cf1a4ae63cac1b5c812e99a
SSDEEP

49152:EusNDS5lStOArOO53RTqtiGydB3IFmDta4lEz:EjNDS5lSRrOO53mWCFCi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dddeca3d3692dcea9bea130c1fdc210_NeikiAnalytics.exe

Files

1dddeca3d3692dcea9bea130c1fdc210_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\namecontrolserver.pdb

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 320B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ